Skip to content

build(deps-dev): bump the dev-dependencies group across 1 directory with 12 updates - #816

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/dev-dependencies-711a0eacad
Open

build(deps-dev): bump the dev-dependencies group across 1 directory with 12 updates#816
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/dev-dependencies-711a0eacad

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 10 updates in the / directory:

Package From To
@eslint/json 2.0.0 2.0.1
@smithy/eventstream-codec 4.3.6 4.5.2
@smithy/node-http-handler 4.7.6 4.11.3
@smithy/util-utf8 4.3.6 4.5.2
@vitest/coverage-v8 4.1.8 4.1.11
@vitest/eslint-plugin 1.6.19 1.6.27
eslint-plugin-security 4.0.0 4.0.1
eslint-plugin-sonarjs 4.0.3 4.2.0
lint-staged 17.0.7 17.3.0
prettier 3.8.3 3.9.6

Updates @eslint/json from 2.0.0 to 2.0.1

Release notes

Sourced from @​eslint/json's releases.

json: v2.0.1

2.0.1 (2026-07-01)

Bug Fixes

  • update dependency @​eslint/plugin-kit to ^0.7.2 (#244) (f262565)
Changelog

Sourced from @​eslint/json's changelog.

2.0.1 (2026-07-01)

Bug Fixes

  • update dependency @​eslint/plugin-kit to ^0.7.2 (#244) (f262565)
Commits
  • 9ebeea3 chore: release 2.0.1 🚀 (#245)
  • ce22b12 docs: Update README sponsors
  • 2ef892a docs: Update README sponsors
  • e5d4f26 docs: Update README sponsors
  • 82de68d chore: update non-major dev-dependencies to v3.8.4 (#247)
  • 99948f6 docs: Update README sponsors
  • cf262a6 docs: Update README sponsors
  • 2202c87 docs: Update README sponsors
  • 74731ef chore: update @​arethetypeswrong/cli to 0.18.3 (#246)
  • f262565 fix: update dependency @​eslint/plugin-kit to ^0.7.2 (#244)
  • See full diff in compare view

Updates @smithy/eventstream-codec from 4.3.6 to 4.5.2

Release notes

Sourced from @​smithy/eventstream-codec's releases.

@​smithy/util-uri-escape@​4.5.2

Patch Changes

  • 99c3f91: Restore npm provenance attestations. No functional changes.
  • Updated dependencies [99c3f91]
    • @​smithy/core@​3.33.2

@​smithy/util-middleware@​4.5.2

Patch Changes

  • 99c3f91: Restore npm provenance attestations. No functional changes.
  • Updated dependencies [99c3f91]
    • @​smithy/core@​3.33.2

@​smithy/util-hex-encoding@​4.5.2

Patch Changes

  • 99c3f91: Restore npm provenance attestations. No functional changes.
  • Updated dependencies [99c3f91]
    • @​smithy/core@​3.33.2

@​smithy/util-defaults-mode-node@​4.5.2

Patch Changes

  • 99c3f91: Restore npm provenance attestations. No functional changes.
  • Updated dependencies [99c3f91]
    • @​smithy/core@​3.33.2

@​smithy/util-config-provider@​4.5.2

Patch Changes

  • 99c3f91: Restore npm provenance attestations. No functional changes.
  • Updated dependencies [99c3f91]
    • @​smithy/core@​3.33.2

@​smithy/util-buffer-from@​4.5.2

Patch Changes

  • 99c3f91: Restore npm provenance attestations. No functional changes.
  • Updated dependencies [99c3f91]
    • @​smithy/core@​3.33.2

@​smithy/util-body-length-node@​4.5.2

Patch Changes

  • 99c3f91: Restore npm provenance attestations. No functional changes.
  • Updated dependencies [99c3f91]
    • @​smithy/core@​3.33.2

@​smithy/util-body-length-browser@​4.5.2

... (truncated)

Changelog

Sourced from @​smithy/eventstream-codec's changelog.

4.5.2

Patch Changes

  • 99c3f91: Restore npm provenance attestations. No functional changes.
  • Updated dependencies [99c3f91]
    • @​smithy/core@​3.33.2

4.5.1

Patch Changes

  • d774f8d: chore: build packages with typescript 7. Packages continue to be compatible with TypeScript 3.4 through 7.0 in consumer applications.
  • Updated dependencies [b3958ad]
  • Updated dependencies [d774f8d]
    • @​smithy/core@​3.33.1

4.5.0

Minor Changes

  • ec9b4b2: chore: update builds to use typescript 6. This should not affect consumers, who may continue to use TypeScript 3.4 through 7.0 as of this version.

Patch Changes

  • Updated dependencies [ec9b4b2]
    • @​smithy/core@​3.32.0

4.4.16

Patch Changes

  • Updated dependencies [fcf1366]
    • @​smithy/core@​3.31.1

4.4.15

Patch Changes

  • Updated dependencies [a14bb71]
    • @​smithy/core@​3.31.0

4.4.14

Patch Changes

  • Updated dependencies [54040ef]
  • Updated dependencies [155bb56]
    • @​smithy/core@​3.30.0

... (truncated)

Commits

Updates @smithy/node-http-handler from 4.7.6 to 4.11.3

Release notes

Sourced from @​smithy/node-http-handler's releases.

@​smithy/node-http-handler@​4.11.3

Patch Changes

  • a825452: switch for-in loops to guarded
  • Updated dependencies [e82a22b]
  • Updated dependencies [a825452]
    • @​smithy/core@​3.33.3

@​smithy/node-http-handler@​4.11.2

Patch Changes

  • 99c3f91: Restore npm provenance attestations. No functional changes.
  • Updated dependencies [99c3f91]
    • @​smithy/core@​3.33.2
    • @​smithy/types@​4.17.2

@​smithy/node-http-handler@​4.11.1

Patch Changes

  • d774f8d: chore: build packages with typescript 7. Packages continue to be compatible with TypeScript 3.4 through 7.0 in consumer applications.
  • Updated dependencies [b3958ad]
  • Updated dependencies [d774f8d]
    • @​smithy/core@​3.33.1
    • @​smithy/types@​4.17.1
Changelog

Sourced from @​smithy/node-http-handler's changelog.

4.11.3

Patch Changes

  • a825452: switch for-in loops to guarded
  • Updated dependencies [e82a22b]
  • Updated dependencies [a825452]
    • @​smithy/core@​3.33.3

4.11.2

Patch Changes

  • 99c3f91: Restore npm provenance attestations. No functional changes.
  • Updated dependencies [99c3f91]
    • @​smithy/core@​3.33.2
    • @​smithy/types@​4.17.2

4.11.1

Patch Changes

  • d774f8d: chore: build packages with typescript 7. Packages continue to be compatible with TypeScript 3.4 through 7.0 in consumer applications.
  • Updated dependencies [b3958ad]
  • Updated dependencies [d774f8d]
    • @​smithy/core@​3.33.1
    • @​smithy/types@​4.17.1

4.11.0

Minor Changes

  • cf69285: use the client logger as a fallback when the request handler has no logger configured, while preserving an explicitly configured handler logger.

Patch Changes

  • Updated dependencies [cf69285]
    • @​smithy/core@​3.33.0

4.10.0

Minor Changes

  • ec9b4b2: chore: update builds to use typescript 6. This should not affect consumers, who may continue to use TypeScript 3.4 through 7.0 as of this version.

Patch Changes

  • Updated dependencies [ec9b4b2]
    • @​smithy/types@​4.17.0
    • @​smithy/core@​3.32.0

... (truncated)

Commits

Updates @smithy/util-utf8 from 4.3.6 to 4.5.2

Changelog

Sourced from @​smithy/util-utf8's changelog.

4.5.2

Patch Changes

  • 99c3f91: Restore npm provenance attestations. No functional changes.
  • Updated dependencies [99c3f91]
    • @​smithy/core@​3.33.2

4.5.1

Patch Changes

  • d774f8d: chore: build packages with typescript 7. Packages continue to be compatible with TypeScript 3.4 through 7.0 in consumer applications.
  • Updated dependencies [b3958ad]
  • Updated dependencies [d774f8d]
    • @​smithy/core@​3.33.1

4.5.0

Minor Changes

  • ec9b4b2: chore: update builds to use typescript 6. This should not affect consumers, who may continue to use TypeScript 3.4 through 7.0 as of this version.

Patch Changes

  • Updated dependencies [ec9b4b2]
    • @​smithy/core@​3.32.0

4.4.16

Patch Changes

  • Updated dependencies [fcf1366]
    • @​smithy/core@​3.31.1

4.4.15

Patch Changes

  • Updated dependencies [a14bb71]
    • @​smithy/core@​3.31.0

4.4.14

Patch Changes

  • Updated dependencies [54040ef]
  • Updated dependencies [155bb56]
    • @​smithy/core@​3.30.0

... (truncated)

Commits

Updates @vitest/coverage-v8 from 4.1.8 to 4.1.11

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.11

   🐞 Bug Fixes

    View changes on GitHub

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

View changes on GitHub
Commits

Updates @vitest/eslint-plugin from 1.6.19 to 1.6.27

Release notes

Sourced from @​vitest/eslint-plugin's releases.

v1.6.27

   🐞 Bug Fixes

    View changes on GitHub

v1.6.26

   🐞 Bug Fixes

    View changes on GitHub

v1.6.25

   🐞 Bug Fixes

    View changes on GitHub

v1.6.24

   🐞 Bug Fixes

    View changes on GitHub

v1.6.23

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v1.6.22

   🐞 Bug Fixes

    View changes on GitHub

v1.6.21

... (truncated)

Commits
  • aad57d1 chore: release v1.6.27
  • d1c0a34 docs(valid-title): fixed the description of the valid-title option (#940)
  • ef70063 fix(valid-title): handle missing argument in valid-title rule (#942)
  • 089732f fix(valid-title): Refine the reportEmptyTitle message (#941)
  • 96f6bfd chore: release v1.6.26
  • 684545f fix: detect test modes in options objects (#937)
  • 48abf8d chore: release v1.6.25
  • bc37d2d fix(valid-expect): support expect.assert members (#936)
  • 1a0fdaf chore: release v1.6.24
  • 57e5389 fix(valid-expect): fix poll and element taking 1 or 2 arguments (#931)
  • Additional commits viewable in compare view

Updates eslint-plugin-security from 4.0.0 to 4.0.1

Release notes

Sourced from eslint-plugin-security's releases.

eslint-plugin-security: v4.0.1

4.0.1 (2026-06-12)

Bug Fixes

  • treat import.meta.dirname and import.meta.filename as static (#200) (74c97bb)
Changelog

Sourced from eslint-plugin-security's changelog.

4.0.1 (2026-06-12)

Bug Fixes

  • treat import.meta.dirname and import.meta.filename as static (#200) (74c97bb)
Commits
  • cb8645c chore: release 4.0.1 🚀 (#204)
  • 74c97bb fix: treat import.meta.dirname and import.meta.filename as static (#200)
  • 0b45f82 chore(deps-dev): bump shell-quote from 1.7.4 to 1.8.4 (#202)
  • 954149a chore(deps-dev): bump handlebars from 4.7.7 to 4.7.9 (#198)
  • d5012b6 chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 (#197)
  • b53d8b4 chore(deps-dev): bump flatted from 3.3.1 to 3.4.2 (#196)
  • 7876750 chore(deps): bump minimatch (#194)
  • See full diff in compare view

Updates eslint-plugin-sonarjs from 4.0.3 to 4.2.0

Changelog

Sourced from eslint-plugin-sonarjs's changelog.

Release Guide

SonarJS currently has two distinct release targets:

Target Artifact Main workflow Notes
Standard SonarQube analyzer Maven/JAR release artifacts .github/workflows/automated-release.yml This is the normal SonarJS release flow.
SQAA (previously A3S) Docker image for LanguageAnalyzerService .github/workflows/docker-sqaa.yml Manual SQAA-only entry point and fallback.

Terminology

  • SQAA is the current name for what older docs and repository names still call A3S.
  • Some external identifiers still keep the legacy a3s name for compatibility. The important ones are:
    • the Docker repository path a3s/analysis/javascript
    • packages/grpc/src/proto/language_analyzer.proto with option java_package = "com.sonarsource.a3s.analyzer.grpc";
  • Do not rename those compatibility-sensitive identifiers as part of a routine release.

Standard SonarQube Analyzer Release

This is the regular SonarJS analyzer release. It produces the standard SonarQube analyzer artifacts and can also automate the SQAA handoff using the same build number.

Entry points

  1. Start .github/workflows/automated-release.yml.
  2. That workflow orchestrates the release and then calls .github/workflows/release.yml for the actual artifact publication.
  3. After the release succeeds, .github/workflows/bump-versions.yml opens the next development iteration PR.

What .github/workflows/automated-release.yml does

The SonarJS workflow is a thin wrapper around SonarSource/release-github-actions/.github/workflows/automated-release.yml@v1 with SonarJS-specific inputs:

  • project name SonarJS
  • plugin name javascript
  • Jira project JS
  • optional SQC and SQS integration PRs
  • optional SQAA integration, enabled in the SonarJS wrapper and implemented by a custom local workflow
  • SLVS, SLVSCODE, SLE, and SLI integration tickets enabled
  • the generic release-github-actions SQAA integration explicitly disabled, because SonarJS uses analysis/js_ts_image_tag instead of gradle/sonar-plugins.versions.toml

The reusable workflow performs the following steps:

  1. Freeze the target branch.
  2. Run the releasability checks with SonarSource/gh-action_releasability@v3.
  3. Resolve the release version with get-release-version.
  4. Resolve the Jira version with get-jira-version.
  5. Generate Jira-based release notes with get-jira-release-notes unless explicit notes were provided.
  6. Create the REL Jira ticket with create-jira-release-ticket.
  7. Publish the GitHub release with publish-github-release.
  8. Unfreeze the branch.
  9. Release the Jira version, create the next Jira version, and move the REL ticket to Technical Release Done.

... (truncated)

Commits

Updates lint-staged from 17.0.7 to 17.3.0

Release notes

Sourced from lint-staged's releases.

v17.3.0

Minor Changes

  • #1825 16b3f74 - It is now possible to run multiple tasks in parallel for a single glob by configuring it with an array of tasks (which run sequentially), and then placing another array inside it (where the tasks will run in parallel). The following demonstrates the order tasks will start in:

    {
  "*.ts": ["first", "second", ["third", "third"], "fourth"]
}

    As a concrete example, lint-staged's own configuration is:

    /** @type {import('./lib/index.js').Configuration} */
export default {
  "*": [
    [
      "oxfmt --check --no-error-on-unmatched-pattern",
      "oxlint --no-error-on-unmatched-pattern",
    ],
  ],
  "*.ts": () => "tsc",
};

    which means:

    1. for all staged files, run the two commands in parallel with staged filenames appended, for example:
      • oxfmt --check --no-error-on-unmatched-pattern lib/index.js
      • oxlint --no-error-on-unmatched-pattern lib/index.js
    2. additionally, if any *.ts files are staged, run tsc without appending any arguments
    3. The two sets of commands also run in parallel

Patch Changes

  • #1829 15f7e53 - During an in-progress merge, files that are unchanged from the branch being merged are now skipped. Technically, files are only included if there are staged changes against both HEAD and MERGE_HEAD.

v17.2.0

Minor Changes

  • #1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

    /** @type {import('lint-staged').Configuration} */
export default {
  "*.ts": () => "tsc", // Run "tsc" when any TS file is changed (for entire project)
};

... (truncated)

Changelog

Sourced from lint-staged's changelog.

17.3.0

Minor Changes

  • #1825 16b3f74 - It is now possible to run multiple tasks in parallel for a single glob by configuring it with an array of tasks (which run sequentially), and then placing another array inside it (where the tasks will run in parallel). The following demonstrates the order tasks will start in:

    {
  "*.ts": ["first", "second", ["third", "third"], "fourth"]
}

    As a concrete example, lint-staged's own configuration is:

    /** @type {import('./lib/index.js').Configuration} */
export default {
  '*': [
    ['oxfmt --check --no-error-on-unmatched-pattern', 'oxlint --no-error-on-unmatched-pattern'],
  ],
  '*.ts': () => 'tsc',
}

    which means:

    1. for all staged files, run the two commands in parallel with staged filenames appended, for example:
      • oxfmt --check --no-error-on-unmatched-pattern lib/index.js
      • oxlint --no-error-on-unmatched-pattern lib/index.js
    2. additionally, if any *.ts files are staged, run tsc without appending any arguments
    3. The two sets of commands also run in parallel

Patch Changes

  • #1829 15f7e53 - During an in-progress merge, files that are unchanged from the branch being merged are now skipped. Technically, files are only included if there are staged changes against both HEAD and MERGE_HEAD.

17.2.0

Minor Changes

  • #1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

    /** @type {import('lint-staged').Configuration} */
export default {
  '*.ts': () => 'tsc', // Run "tsc" when any TS file is changed (for entire project)
}

    Where the spawned command is literally "tsc" without any extra arguments. Previously, this was still chunked when a lot of files were staged. Now, it probably won't be chunked because the length of the command is just three letters.

... (truncated)

Commits
  • d153443 Merge pull request #1828 from lint-staged/changeset-release/main
  • 5162c14 chore(changeset): release
  • a4db9a4 Merge pull request #1831 from lint-staged/linter-updates
  • ea96cab style: enable oxlint "suspicious" category
  • 2fae007 style: add @e18e/eslint-plugin
  • 2280c38 Merge pull request #1829 from lint-staged/fix-merge-conflict-files
  • 1453ae6 test: relax assertion so that it passes in worktree
  • 15f7e53 fix: lint only files changed against HEAD and MERGE_HEAD, during a merge
  • dedfc31 Merge pull request #1825 from lint-staged/parallel-tasks-inside-sequence
  • 286e25c feat: allow running parallel tasks by nesting arrays
  • Additional commits viewable in compare view

Updates prettier from 3.8.3 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

🔗 Changelog

3.8.4

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

  1. Install the plugin:

    yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

Updates semver from 7.8.1 to 7.8.5

Release notes

Sourced from semver's releases.

v7.8.5

7.8.5 (2026-06-19)

Bug Fixes

v7.8.4

7.8.4 (2026-06-09)

Bug Fixes

  • e583226 #874 reject numer...

    Description has been truncated

@dependabot
build(deps-dev): bump the dev-dependencies group across 1 directory w…
3d269dc 
…ith 12 updates

Bumps the dev-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@eslint/json](https://github.com/eslint/json) | `2.0.0` | `2.0.1` |
| [@smithy/eventstream-codec](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/eventstream-codec) | `4.3.6` | `4.5.2` |
| [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler) | `4.7.6` | `4.11.3` |
| [@smithy/util-utf8](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/util-utf8) | `4.3.6` | `4.5.2` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.8` | `4.1.11` |
| [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest) | `1.6.19` | `1.6.27` |
| [eslint-plugin-security](https://github.com/eslint-community/eslint-plugin-security) | `4.0.0` | `4.0.1` |
| [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS) | `4.0.3` | `4.2.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.7` | `17.3.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.6` |



Updates `@eslint/json` from 2.0.0 to 2.0.1
- [Release notes](https://github.com/eslint/json/releases)
- [Changelog](https://github.com/eslint/json/blob/main/CHANGELOG.md)
- [Commits](eslint/json@json-v2.0.0...json-v2.0.1)

Updates `@smithy/eventstream-codec` from 4.3.6 to 4.5.2
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases)
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/eventstream-codec/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/eventstream-codec@4.5.2/packages/eventstream-codec)

Updates `@smithy/node-http-handler` from 4.7.6 to 4.11.3
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases)
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.11.3/packages/node-http-handler)

Updates `@smithy/util-utf8` from 4.3.6 to 4.5.2
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases)
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/util-utf8/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/util-utf8@4.5.2/packages/util-utf8)

Updates `@vitest/coverage-v8` from 4.1.8 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/coverage-v8)

Updates `@vitest/eslint-plugin` from 1.6.19 to 1.6.27
- [Release notes](https://github.com/vitest-dev/eslint-plugin-vitest/releases)
- [Commits](vitest-dev/eslint-plugin-vitest@v1.6.19...v1.6.27)

Updates `eslint-plugin-security` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/eslint-community/eslint-plugin-security/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-security/blob/main/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-security@eslint-plugin-security-v4.0.0...eslint-plugin-security-v4.0.1)

Updates `eslint-plugin-sonarjs` from 4.0.3 to 4.2.0
- [Release notes](https://github.com/SonarSource/SonarJS/releases)
- [Changelog](https://github.com/SonarSource/SonarJS/blob/master/docs/RELEASE.md)
- [Commits](https://github.com/SonarSource/SonarJS/commits)

Updates `lint-staged` from 17.0.7 to 17.3.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.0.7...v17.3.0)

Updates `prettier` from 3.8.3 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.9.6)

Updates `semver` from 7.8.1 to 7.8.5
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.8.1...v7.8.5)

Updates `vitest` from 4.1.8 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

---
updated-dependencies:
- dependency-name: "@eslint/json"
  dependency-version: 2.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@smithy/eventstream-codec"
  dependency-version: 4.5.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@smithy/node-http-handler"
  dependency-version: 4.11.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@smithy/util-utf8"
  dependency-version: 4.5.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@vitest/eslint-plugin"
  dependency-version: 1.6.27
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: eslint-plugin-security
  dependency-version: 4.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: eslint-plugin-sonarjs
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: lint-staged
  dependency-version: 17.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: semver
  dependency-version: 7.8.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 25, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor Author

Assignees

The following users could not be added as assignees: jennyEckstein. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@eaviles eaviles

@BizzlePop34 BizzlePop34

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@eaviles @BizzlePop34